PAC-BFAR Satellite Hatchery provides this Privacy Notice to explain how personal data is handled in the PAC-BFAR Hatchery Decision Support System. This notice supports transparency under Republic Act No. 10173, the Data Privacy Act of 2012, its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission.
1. Personal data processed
Depending on the user's role and activity, the System may process a name, official or provided email address, role, account status, profile image or linked Google identifier, password hash, email-verification and multi-factor authentication status, sign-in timestamps, IP address, browser or device information, assigned work, approvals, notes, and audit records of System activity.
2. Purposes
- To create, verify, approve, secure, and administer user accounts;
- To control access according to official roles and responsibilities;
- To attribute records, approvals, decisions, and operational actions to authorized users;
- To deliver security codes, operational notifications, and account messages;
- To detect misuse, investigate incidents, preserve auditability, and maintain backups;
- To support official hatchery operations, reporting, accountability, and lawful institutional requirements.
3. Basis and manner of processing
Personal data may be processed when necessary for the performance of official functions, compliance with legal or institutional obligations, protection of lawful rights and interests, provision and security of the System, and—where specifically required—valid consent. Acknowledging this notice confirms that it was presented; it does not convert every processing activity into consent-based processing.
4. Access and recipients
Personal data may be accessed by authorized administrators, managers, assigned personnel, technical support providers acting under authority, auditors, and public authorities when disclosure is required or permitted by law. Access is limited according to role and legitimate operational need. Data shall not be sold.
5. Automated processing
The System uses historical hatchery production data to generate forecasts and operational recommendations. These tools are intended to support, not solely determine, decisions about personnel. Authorized managers remain responsible for reviewing operational recommendations and relevant field evidence.
6. Retention
Account information and audit records will be retained only for as long as necessary for official operations, security, accountability, records-management obligations, investigation, or legal claims, according to an approved institutional retention schedule. Specific retention periods are governed by the approved institutional records-retention schedule and applicable law.
7. Protection
Reasonable organizational, physical, and technical safeguards are applied, including role-based access, password protection, email verification, multi-factor authentication for privileged roles, audit logging, validation controls, and protected backups. No system can guarantee absolute security; suspected incidents should be reported promptly.
8. Data-subject rights
Subject to applicable law and lawful limitations, a data subject may exercise the rights to be informed, access, object, rectify, erase or block, data portability, file a complaint, and claim damages. Requests may require identity verification and may be limited where retention or processing is required by law or official duty.
9. Contact and complaints
Privacy questions and requests should be directed to PAC-BFAR Satellite Hatchery through its official Data Protection Officer or administrative channels. A data subject may also seek guidance or lodge a complaint with the National Privacy Commission through its official channels.
10. Updates
The version and effective date appear above. Material changes to the identity of the responsible organization, processing purposes, scope, methods, recipients, or data-subject rights should be communicated before or at the next practical opportunity.